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IN THE CLAIMS 



Please amend the claims as follows: 



1. 



(Currently Amended) A method of authenticating a client to a 



communication system comprising the steps of: 

receiving from a mobile station a subscriber identity corresponding to 
a subscriber of a mobile telecommunication network, wherein the mobile 
telecommunication network is separate from the communication system to 
which the client is to be authenticated; 

sending the subscriber identity to an authentication block of the 
mobile telecommimication network; 

receiving from the authentication block at least one challenge and at 
least one first secret based on a subscriber's secret specific to the subscriber 
identity; 

sending the at least one challenge to the to a subscriber identity 
module; 

receiving at least one second secret in response to the at least one 
challenge; and 



using the second secret for authenticating the client. 



2. 



(Original) The method of authenticating of claim 1 further comprising: 

receiving a PIN from a user; and 
transmitting wirelessly the PIN to the mobile station. 



3. 



(Original) The method according to claim 2 ftirther comprising: 

encrypting the PIN before the step of transmitting. 



4. 



(Original) The method according to claim 1 wherein the step of using further 



comprises: 



encrypting the second secret to provide a encrypted second 



secret; and 



8 



DOCKET: 944-006.006-1 
USSN: 09/867,049 

transmitting the encrypted second secret to the 
communication system. 

5. (Original) The method according to claim 4 wherein the step of using further 
comprises: 

refreshing the encrypted second secret. 

6. (Original) The method according to claim 1 wherein the step of sending the 
subscriber identity to an authentication block comprises sending wirelessly the 
subscriber identity to the authentication block; and the step of receiving from the 
authentication block comprises receiving wirelessly from the authentication block. 

7. (Original) The method according to claim 1 wherein the steps of: 

receiving from a mobile station a subscriber identity comprises 
receiving wirelessly from a mobile station a subscriber identity; 

sending the at least one challenge comprises sending wirelessly the at 
least one challenge; and 

receiving at least one second secret comprises receiving wirelessly at 
least one second secret. 

8. (Original) The method of authenticating of claim 7 further comprising: 

receiving a PIN from a user; and 

transmitting wirelessly the PIN to the mobile station. 

9. (Original) The method of authenticating of claim 8 wherein the step of 
transmitting wirelessly comprises transmitting an infrared signal. 

10. (Original) The method of authenticating of claim 8 wherein the step of 
transmitting wirelessly comprises transmitting a radio signal. 

1 1 . (Original) The method of authenticating of claim 8 wherein the step of 
transmitting wirelessly comprises transmitting a low power radio signal. 
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12. (Original) The method of authenticating of claim 8 wherein the step of 
transmitting wirelessly comprises transmitting an acoustic signal. 

13. (Currently Amended) A client for authenticating a client to a communication 
system comprising: 

a means for receiving from a mobile station a subscriber identity 
corresponding to a subscriber of a mobile telecommunication network, 
wherein the mobile telecommunication network is separate from the 
commimication system to which the client is to be authenticated; 

a means for sending the subscriber identity to an authentication block 
of the mobile telecommunication network; 

a means for receiving from the authentication block at least one 
challenge and at least one first secret based on a subscriber's secret specific 
to the subscriber identity; 

a means for sending the at least one challenge te-thetoa subscriber 
identity module; 

a means for receiving at least one second secret in response to the at 
least one challenge; and 

a means for using the second secret for authenticating the client. 

14. (Original) The client for authenticating of claim 13 further comprising: 

a means for receiving a PIN from a user; and 

a means for transmitting wirelessly the PIN to the mobile station. 

15. (Currently Amended) The client according to claim 14 further comprising: 

a means for encrypting the PIN before the stop of transmittin g the 

PIN. 



16. (Original) The client according to claim 13 wherein means for using further 
comprises: 
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a means for encrypting the second secret to provide a encrypted 
second secret; and 

a means for transmitting the encrypted second secret to the 
communication system. 

17. (Currently Amended) The m e thod chent according to claim 16 wherein the 
stop o & neans for using furth e r compris e s: the second secret is able to refresh 
r e fr e shing the encrypted second secret. 

18. (Currently Amended) The client according to claim 13 wherein tfee-athe 
means for sending the subscriber identity to an authentication block comprises a 
means for sending wirelessly the subscriber identity to the authentication block; and 
the a means for receiving from the authentication block comprises a means for 
receiving wirelessly from the authentication block. 

19. (Original) The client according to claim 13 wherein: 

a means for receiving from a mobile station a subscriber identity 
comprises a means for receiving wirelessly from a mobile station a 
subscriber identity; 

a means for sending the at least one challenge comprises a means for 
sending wirelessly the at least one challenge; and 

a means for receiving at least one second secret comprises a means 
for receiving wirelessly at least one second secret. 

20. (Original) The client of claim 19 fiirther comprising: 

a means for receiving a PIN from a user; and 

a means for transmitting wirelessly the PIN to the mobile station. 

21 . (Currently Amended) The client of claim 19 wherein ^te-athe means for 
transmitting wirelessly comprises a means for transmitting an infrared signal. 
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22. (Currently Amended) The client of claim 1 9 wherein Sie-athe means for 
transmitting wirelessly comprises a means for transmitting a radio signal. 

23. (Currently Amended) The client of claim 19 wherein the-athe means for 
transmitting wirelessly comprises a means for transmitting a low power radio signal. 

24. (Currently Amended) The client of claim 1 9 wherein #te-athe means for 
transmitting wirelessly comprises a means for transmitting an acoustic signal. 

25. (Original) A method for providing at least one secret based on a subscriber 
identity comprising the steps of: 

retrieving from a subscriber identity module a subscriber identity 
corresponding to a subscriber of a mobile telecommunication network; 

sending wirelessly the subscriber identity to a client for 
authenticating the client to the communication system; 

receiving wirelessly from the client at least one challenge based on a 
subscriber's secret specific to the subscriber identity; 

generating at least one secret in response to the at least one challenge 

and 

sending wirelessly the at least one secret. 

26. (Original) The method of claim 25 wherein the method fiirther comprises a 
step of wirelessly receiving a request. 

27. (Original) The method of claim 26 wherein the request contains a PIN. 

28. (Original) The method of claim 27 wherein the request contains an encrypted 
PIN. 

29. (Original) The method of claim 27 fiirther comprising a step of confirming 
that the PIN matches a identity module PIN. 



12 



DOCKET: 944-006.006-1 
USSN: 09/867,049 

30. (Original) A mobile station for providing at least one secret based on a 
subscriber identity comprising: . _ . 

means for retrieving from a subscriber identity module a subscriber 
identity corresponding to a subscriber of a mobile telecommimication 
network; 

means for sending wirelessly the subscriber identity to a client for 
authenticating the client to the commimication system; 

means for receiving wirelessly from the client at least one challenge 
based on a subscriber's secret specific to the subscriber identity; 

means for generating at least one secret in response to the at least one 
challenge and 

means for sending wirelessly the at least one secret. 

3 1 . (Currently Amended) The mobile station of claim 30 whoroin tho mothod SO, 
fiirther compris e s comprising a means for wirelessly receiving a request. 

32. (Original) The mobile station of claim 3 1 wherein the request contains a 
PIN. 

33. (Original) The mobile station of claim 32 wherein the request contains an 
encrypted PIN. 

34. (Original) The mobile station of claim 32 fiirther comprising means for 
confirming that the PIN matches a identity module PIN. 

35. (Currently Amended) A computer program product embodied in a computer 
readable medium for controlling a client in order to authenticate the client to a 
communication system by using a subscriber identity module of a mobile 
telecommunications network, wherein the mobile telecommunications network is 
separate from the conmiunications system to which the client is to be authenticated; 
the computer program product comprising: 
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computer executable program code to enable the client to retrieve from a 
subscriber identity module a subscriber identity corresponding to a subscriber of a 
mobile telecommunications network; 

computer executable program code to enable the client to send the subscriber 
identity to an authentication block of the mobile telecommunications network; 

computer executable program code to enable the client to receive from the 
authentication block at least one challenge and at least one first secret based on a 
subscriber's secret specific to the subscriber identity; 

computer executable program code to enable the client to send the at least 
one challenge to the subscriber identity module; 

computer executable program code to enable the client to receive at least one 
second secret in response to the at least one challenge; and 

computer executable program code to enable the client to use the second 
secret for authenticating the client; characterised in that the subscriber identity 
module is accessed over a local wireless link when retrieving the subscriber identity. 

36. (Cancelled) 

37. (Currently Amended) A computer program product embodied in a computer 
readable medium for controlling a device for authonticatio n authenticating a client to 
a communications system using a subscriber identity module of a mobile 
telecommunications network, wherein the communications system is separate from 
the mobile telecommunications network, the computer program product comprising: 

computer executable program code to enable the device to retrieve from a 
subscriber identity module a subscriber identity corresponding to a subscriber of a 
mobile telecommunications network; 

computer executable program code to enable the device to send the 
subscriber identity to a client over a local wireless link for authenticating the client 
to the communications system; 

computer executable program code to enable the device to receive over the 
local wireless link from the client at least one challenge based on a subscriber's 
secret specific to the subscriber identity; 
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computer executable program code to enable the device to provide the at 
- least one challenge to the subscriber identity module and receiving at least one 
authentication secret in response to the challenge; and 

computer executable program code to enable the device to send the at least 
one authentication secret over the local wireless link to the client. 
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